I thought this was a really interesting forensic use of metadata, a positive scenario for the kind of bulk metadata collection we’ve been talking about since Snowden. If you want to skip to it, it’s mostly told in sections 5, 6, and 7.